$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft File: POusQFclHIqquVTcIgsiSWvu9WM.mft (raw, json) Hash identifier: C3W4AJLVfAfOGmwS/4EBVTBby+FJRyE7wKku8GVDS74= Subject key identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB Authority key identifier: 3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 Certificate issuer: /CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Certificate serial: 039F Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft Manifest number: 0392 Signing time: Tue 03 Jun 2025 09:56:10 +0000 Manifest this update: Tue 03 Jun 2025 09:56:10 +0000 Manifest next update: Thu 05 Jun 2025 09:56:10 +0000 Files and hashes: 1: POusQFclHIqquVTcIgsiSWvu9WM.crl (hash: yxjukdU3Lu58fljvxAPrwxJaPzWQ/GQOnmojBKXNzjc=) 2: XC4Us5letSN9wSAxml54Gor9YVA.roa (hash: DuQyRZJyC/4CPp02vlagbKqPh1oZOnwzCnVn2HW+gqQ=) 3: juiwpCIDvIAphERKA7ryIbUCp6A.roa (hash: 7iS7IE8nK4IGzaVTM0DTiryjMO5B+V9utqs5ZmjJejA=) Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 03:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 927 (0x39f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3CEBAC4057251C8AAAB954DC220B22496BEEF563 Validity Not Before: Jun 3 09:56:10 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=C8CD023F29E25DE9D3BBA766BB4D1201BA7074DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:48:c8:2c:ab:24:28:82:73:e4:d4:7b:89:27: 22:a9:1c:80:9a:96:6e:19:52:cb:4c:30:68:87:42: 7f:4e:6d:9d:c7:f8:91:a0:af:55:5e:9d:a6:a5:5f: be:57:be:b8:69:95:fe:cd:2a:2d:8c:8a:73:01:61: 27:8a:8b:b4:22:c7:68:ed:bb:be:57:3b:e3:b6:e7: bd:b0:d0:c5:f0:64:ec:c1:48:5f:27:ce:ec:17:59: c0:57:3d:1c:ac:d2:70:13:2c:dc:64:24:13:19:51: cb:c3:d8:3c:35:6e:7e:e2:25:78:bd:36:23:42:fd: dc:7e:29:ba:73:59:ca:ab:eb:92:f8:89:39:4f:fe: f2:ee:10:fa:b9:32:81:2a:e6:1f:35:ec:ae:0f:f3: 70:7d:6e:0b:d6:6b:e4:ff:c4:9f:5a:85:db:63:50: ee:bf:f1:90:62:e9:2e:16:48:cf:c5:d6:e4:99:51: 45:57:ca:3f:14:60:e7:04:a6:06:ac:b0:ef:1c:24: 89:ca:f0:d5:b8:6f:73:20:ec:1f:42:6c:8e:fc:2c: 5d:2d:52:ab:1f:9f:ae:54:46:79:29:40:62:f5:08: da:05:bd:5b:c8:2f:d3:93:6b:00:b7:53:e3:9b:ec: c6:ad:f7:cc:f7:66:91:a7:9c:87:6f:01:ce:89:24: 8c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CD:02:3F:29:E2:5D:E9:D3:BB:A7:66:BB:4D:12:01:BA:70:74:DB X509v3 Authority Key Identifier: keyid:3C:EB:AC:40:57:25:1C:8A:AA:B9:54:DC:22:0B:22:49:6B:EE:F5:63 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/POusQFclHIqquVTcIgsiSWvu9WM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CCP1138480/POusQFclHIqquVTcIgsiSWvu9WM.mft RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:09:d4:01:0f:ed:06:7f:08:19:35:7c:53:0d:ec:b2:5c:e0: 67:95:ff:78:7c:c3:6f:47:4a:af:4b:34:1f:5f:49:9a:2d:14: 45:d1:ac:61:a1:86:38:b3:67:fa:5f:4e:ae:28:44:0a:6f:74: 87:34:2d:de:87:26:44:90:26:34:c0:84:50:22:62:35:fa:0f: cb:d4:ad:85:a2:88:3b:7c:02:c4:a7:d2:3e:d4:92:75:99:49: ba:3f:dc:c5:9c:ca:b5:67:c2:b1:06:ce:36:98:34:f9:c7:6d: 07:12:fa:57:62:a1:27:09:68:89:c7:a3:5c:6c:17:1c:85:c5: 11:f3:28:3b:5d:af:bf:c0:24:ae:8b:4d:73:7d:0a:92:c2:62: 43:8b:de:a7:6f:fc:5c:d2:54:b9:40:0f:b1:37:50:14:7f:70: 4f:34:5f:c3:30:3b:8d:e1:8c:fb:79:aa:66:7f:c9:64:29:38: d3:4c:49:fb:76:02:97:c7:d9:2b:76:3e:2f:bb:d2:85:70:8b: 1c:7d:25:d5:aa:a2:7a:c1:a2:06:87:66:d1:ed:1d:a0:d7:03: c6:ae:5c:33:01:eb:22:49:8c:ec:b5:c8:9b:b0:b9:22:34:95: 25:ce:57:18:96:78:cb:86:4f:d5:fc:27:a7:59:bd:a4:7b:3d: 45:bf:22:c0 -----BEGIN CERTIFICATE----- MIIE8zCCA9ugAwIBAgICA58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoM0NF QkFDNDA1NzI1MUM4QUFBQjk1NERDMjIwQjIyNDk2QkVFRjU2MzAeFw0yNTA2MDMw OTU2MTBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4Q0QwMjNGMjlFMjVE RTlEM0JCQTc2NkJCNEQxMjAxQkE3MDc0REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDkSMgsqyQognPk1HuJJyKpHICalm4ZUstMMGiHQn9ObZ3H+JGg r1VenaalX75Xvrhplf7NKi2MinMBYSeKi7Qix2jtu75XO+O2572w0MXwZOzBSF8n zuwXWcBXPRys0nATLNxkJBMZUcvD2Dw1bn7iJXi9NiNC/dx+KbpzWcqr65L4iTlP /vLuEPq5MoEq5h817K4P83B9bgvWa+T/xJ9ahdtjUO6/8ZBi6S4WSM/F1uSZUUVX yj8UYOcEpgassO8cJInK8NW4b3Mg7B9CbI78LF0tUqsfn65URnkpQGL1CNoFvVvI L9OTawC3U+Ob7Mat98z3ZpGnnIdvAc6JJIy5AgMBAAGjggIPMIICCzAdBgNVHQ4E FgQUyM0CPyniXenTu6dmu00SAbpwdNswHwYDVR0jBBgwFoAUPOusQFclHIqquVTc IgsiSWvu9WMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvQ0NQMTEz ODQ4MC9QT3VzUUZjbEhJcXF1VlRjSWdzaVNXdnU5V00uY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL1BPdXNRRmNsSElxcXVWVGNJZ3NpU1d2dTlXTS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL0NDUDExMzg0ODAvUE91c1FGY2xI SXFxdVZUY0lnc2lTV3Z1OVdNLm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADEJ1AEP7QZ/CBk1fFMN7LJc4GeV/3h8w29HSq9LNB9fSZotFEXRrGGh hjizZ/pfTq4oRApvdIc0Ld6HJkSQJjTAhFAiYjX6D8vUrYWiiDt8AsSn0j7UknWZ Sbo/3MWcyrVnwrEGzjaYNPnHbQcS+ldioScJaInHo1xsFxyFxRHzKDtdr7/AJK6L TXN9CpLCYkOL3qdv/FzSVLlAD7E3UBR/cE80X8MwO43hjPt5qmZ/yWQpONNMSft2 ApfH2St2Pi+70oVwixx9JdWqonrBogaHZtHtHaDXA8auXDMB6yJJjOy1yJuwuSI0 lSXOVxiWeMuGT9X8J6dZvaR7PUW/IsA= -----END CERTIFICATE-----Generated at Wed Jun 4 00:39:16 2025 by rpki-client